Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: 00xyZy/fVsnx+/Dz2h6u1mZ1I2duYspLq1MAKx13z5o=
Subject key identifier: 81:00:AE:E2:2A:10:B4:08:5E:79:F8:C3:04:93:67:17:7C:88:3F:F8
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0198D5833C481A020272B850B279B2A155F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 07A1
Signing time: Sat 23 Aug 2025 06:00:04 +0000
Manifest this update: Sat 23 Aug 2025 06:00:04 +0000
Manifest next update: Sun 24 Aug 2025 06:00:04 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: Vpsodbc27hDF409Y78VbuQN3P1EqTrzl0tkc57dnFSs=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:3c:48:1a:02:02:72:b8:50:b2:79:b2:a1:55:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Aug 23 06:00:04 2025 GMT
Not After : Aug 24 06:00:04 2025 GMT
Subject: CN=8100aee22a10b4085e79f8c3049367177c883ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:4c:d9:ae:15:9d:5d:86:03:8c:39:81:d9:60:
a3:fa:cc:7c:39:64:ac:62:30:bc:cc:d8:8b:bb:70:
b5:0c:09:f0:49:f0:c4:59:cd:36:c7:4a:34:c5:f0:
7d:59:3e:fe:31:70:f1:a2:fb:1b:1d:e4:f4:fb:55:
28:aa:cc:de:0d:7a:86:00:2c:94:da:30:cd:41:3f:
1f:b2:4a:cc:af:5b:fd:45:67:9a:d8:a1:46:78:7a:
a4:30:73:c6:ab:d9:3f:11:78:21:8a:64:3c:ee:49:
65:9f:35:74:6f:d3:e0:28:eb:2f:f8:16:7a:26:df:
e2:93:2c:1d:e3:ae:d2:ce:c3:b5:13:fa:f7:5a:f4:
80:33:b3:76:31:18:41:2d:b2:a1:f8:0e:83:5a:fa:
1a:72:c7:2c:6a:3f:83:37:75:e9:59:5f:60:28:1e:
2e:ab:4c:73:55:82:9d:c5:aa:ec:5f:25:f9:a5:37:
40:06:45:eb:bb:52:6f:5b:10:f6:3d:58:ea:ce:36:
c3:b4:b5:70:0e:df:82:53:47:80:36:39:06:6c:96:
a4:33:cf:e0:0f:21:fd:21:44:a8:6a:c0:5a:3d:f4:
51:08:9d:95:03:cd:26:ba:f6:f4:33:17:39:81:96:
f2:96:89:bc:d7:c2:cf:a7:1e:ed:d4:0a:81:6a:d6:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:00:AE:E2:2A:10:B4:08:5E:79:F8:C3:04:93:67:17:7C:88:3F:F8
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:a0:f8:78:65:25:16:e1:01:d5:ac:59:18:f3:f1:8f:24:75:
d2:e3:ff:0b:f7:e0:30:bb:51:67:f5:3b:a2:a3:5d:12:0a:ba:
99:02:7e:03:c6:41:0a:1b:94:18:6f:31:45:f4:f7:1c:7b:b5:
d5:42:8d:a1:33:bb:4a:ae:3c:42:86:f2:8e:11:44:23:b6:d3:
77:d4:4d:5b:bf:a8:d3:9d:90:3d:63:12:9b:c3:88:d3:38:c3:
08:38:7c:5d:85:95:98:ca:14:81:5f:7d:0d:28:67:96:84:0a:
6e:f1:fb:61:1d:92:a2:c5:78:a3:7a:27:70:21:fa:ed:6a:8e:
9c:91:cd:ac:8c:b3:af:69:ee:43:b9:73:05:ea:90:94:08:15:
d2:e1:a2:c2:c4:96:e4:ca:77:ef:a5:9f:31:79:c1:3c:9c:71:
58:5c:06:49:cd:fc:34:1c:55:22:01:65:e2:04:30:68:98:5e:
16:1c:01:15:41:9d:7e:85:d7:05:ac:65:9b:51:42:a8:35:e8:
e8:74:40:05:9b:eb:81:93:bd:f4:12:04:0a:76:75:72:62:c7:
40:7d:e0:d1:37:ba:66:1c:e3:5d:77:e3:77:9a:9c:47:d2:89:
ad:90:21:8d:c4:96:e1:06:8f:68:8a:79:da:33:1e:84:cf:da:
c4:82:a8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:34 2025 by rpki-client